TamperedChef Malware Is Hiding in Signed Productivity Apps – How to Stay Safe
When a Signed App Isn’t Safe: How TamperedChef Slips Malware Past Your Defenses It’s common advice: only install software from official sources, and look for digital signatures to be sure it’s legitimate. But the TamperedChef malware campaign shows that even signed apps can be dangerous. Security researchers have found attackers using valid code signatures on popular productivity apps—like PDF editors and note-taking tools—to deliver info-stealers and remote access trojans (RATs) to unsuspecting users. ...